Common Platform Enumeration (CPE) is a structured naming scheme for information technology systems, platforms, and packages. Based upon the generic syntax for Uniform Resource Identifiers (URI), CPE includes a formal name format, a language for describing complex platforms, a method for checking names against a system, and a description format for binding text and tests to a name.
CPE is used by the SCAP application to align SCAP data streams and assessment results with the intended platforms. CPE values are imported from SCAP data streams and are used in conjunction with OVAL definitions and the scanner appliance. Once the scan is complete, users can view CPE information in the Policy XML Report.
The Policy XML Report is an XCCDF result document which adheres to the XCCDF specification. The Policy XML Report constrains the portion of the XCCDF specification dealing with XCCDF test results. The system information contains the target NetBIOS hostname, actual operating system detected, operating system version as defined by the target, CPE string, and IP address of the target.